65.49.20.75 - IPInfo

Basic Info

City: unknown

Region: unknown

Country: United States

Internet Service Provider: unknown

Hostname: unknown

Organization: unknown

Usage Type: unknown

Comments:

Make a comment on this IP

Type	Details	Datetime
proxy	Attack RDP	2022-12-06 14:07:36

Comments on same subnet:

IP	Type	Details	Datetime
65.49.20.78	botsattack	Compromised IP	2025-01-28 22:48:38
65.49.20.67	botsattackproxy	Redis bot	2024-04-23 21:05:33
65.49.20.118	attackproxy	VPN fraud	2023-06-12 13:45:52
65.49.20.110	proxy	VPN fraud	2023-06-06 12:43:08
65.49.20.101	proxy	VPN fraud	2023-06-01 16:00:58
65.49.20.107	proxy	VPN fraud	2023-05-29 12:59:34
65.49.20.100	proxy	VPN fraud	2023-05-22 12:53:45
65.49.20.114	proxy	VPN fraud	2023-04-07 13:32:29
65.49.20.124	proxy	VPN fraud	2023-04-03 13:08:01
65.49.20.105	proxy	VPN fraud	2023-03-16 13:52:13
65.49.20.123	proxy	VPN fraud	2023-03-09 14:09:02
65.49.20.90	proxy	VPN scan	2023-02-20 14:00:04
65.49.20.119	proxy	VPN fraud	2023-02-14 20:08:26
65.49.20.106	proxy	Brute force VPN	2023-02-08 14:01:13
65.49.20.77	proxy	VPN	2023-02-06 13:57:51

Whois info:

Dig info:

; <<>> DiG 9.10.3-P4-Ubuntu <<>> 65.49.20.75
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 2590
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;65.49.20.75.			IN	A

;; AUTHORITY SECTION:
.			257	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2022020702 1800 900 604800 86400

;; Query time: 15 msec
;; SERVER: 183.60.83.19#53(183.60.83.19)
;; WHEN: Tue Feb 08 12:27:20 CST 2022
;; MSG SIZE  rcvd: 104

Host info

75.20.49.65.in-addr.arpa is an alias for 75.64-26.20.49.65.in-addr.arpa.
75.64-26.20.49.65.in-addr.arpa domain name pointer scan-18b.shadowserver.org.

Nslookup info:

Server:		183.60.83.19
Address:	183.60.83.19#53

Non-authoritative answer:
75.20.49.65.in-addr.arpa	canonical name = 75.64-26.20.49.65.in-addr.arpa.
75.64-26.20.49.65.in-addr.arpa	name = scan-18b.shadowserver.org.

Authoritative answers can be found from:

Related IP info:

Related comments:

IP	Type	Details	Datetime
27.254.137.144	attack	2020-10-04T14:12:46.701134mail.standpoint.com.ua sshd[16501]: Failed password for invalid user conectar from 27.254.137.144 port 46086 ssh2 2020-10-04T14:16:15.594958mail.standpoint.com.ua sshd[17008]: Invalid user ubuntu from 27.254.137.144 port 46150 2020-10-04T14:16:15.597482mail.standpoint.com.ua sshd[17008]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=27.254.137.144 2020-10-04T14:16:15.594958mail.standpoint.com.ua sshd[17008]: Invalid user ubuntu from 27.254.137.144 port 46150 2020-10-04T14:16:17.758816mail.standpoint.com.ua sshd[17008]: Failed password for invalid user ubuntu from 27.254.137.144 port 46150 ssh2 ...	2020-10-04 19:31:50
119.45.114.133	attackbots	2020-10-04T10:43:17.609205shield sshd\[3143\]: Invalid user admin from 119.45.114.133 port 53998 2020-10-04T10:43:17.618578shield sshd\[3143\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.114.133 2020-10-04T10:43:19.233402shield sshd\[3143\]: Failed password for invalid user admin from 119.45.114.133 port 53998 ssh2 2020-10-04T10:47:13.481319shield sshd\[3396\]: pam_unix$sshd:auth$: authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.45.114.133 user=root 2020-10-04T10:47:15.827976shield sshd\[3396\]: Failed password for root from 119.45.114.133 port 38006 ssh2	2020-10-04 18:54:16
220.133.56.242	attackbotsspam	TCP (SYN) 220.133.56.242:9344 -> port 23, len 44	2020-10-04 19:11:35
200.31.22.170	attackbots	Hit on MSSQL honeypot :1433	2020-10-04 19:17:35
170.210.221.48	attackspambots	$f2bV_matches	2020-10-04 19:24:37
190.77.253.27	attack	Brute forcing RDP port 3389	2020-10-04 19:35:36
202.79.53.208	attackbots	Wordpress File Manager Plugin Remote Code Execution Vulnerability, PTR: PTR record not found	2020-10-04 19:27:13
125.137.191.215	attackspam	Cowrie Honeypot: 3 unauthorised SSH/Telnet login attempts between 2020-10-04T07:54:52Z and 2020-10-04T08:02:41Z	2020-10-04 19:32:32
167.114.155.2	attack	Oct 4 03:28:36 ny01 sshd[14972]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.155.2 Oct 4 03:28:37 ny01 sshd[14972]: Failed password for invalid user gabriel from 167.114.155.2 port 35240 ssh2 Oct 4 03:32:45 ny01 sshd[15416]: Failed password for root from 167.114.155.2 port 42712 ssh2	2020-10-04 18:54:02
40.89.180.179	attackspam	Oct 4 07:30:56 XXX sshd[64727]: Invalid user mobile from 40.89.180.179 port 44640	2020-10-04 19:01:14
78.128.112.30	attackbotsspam	Automatic report - Banned IP Access	2020-10-04 19:30:05
183.110.79.173	attack	RDPBruteCAu	2020-10-04 19:20:15
177.61.189.62	attack	Unauthorised access (Oct 3) SRC=177.61.189.62 LEN=52 TOS=0x10 PREC=0x40 TTL=114 ID=19051 DF TCP DPT=445 WINDOW=8192 SYN	2020-10-04 19:16:23
45.141.84.175	attackspambots	Repeated RDP login failures. Last user: openpgsvc	2020-10-04 19:34:37
129.226.112.181	attack	TCP (SYN) 129.226.112.181:56223 -> port 9045, len 44	2020-10-04 18:55:20

Recently Reported IPs

42.238.190.85	186.232.249.42	93.117.16.177	95.81.194.10
59.63.204.149	1.128.23.189	175.121.97.237	185.63.200.162
64.62.197.206	60.208.132.206	177.53.68.210	167.99.236.74
61.220.124.232	187.251.128.134	42.61.209.183	31.129.48.240
185.187.197.1	201.27.148.129	50.111.63.249	193.187.150.143